Among publicly disclosed attacks, Qilin was responsible for 22 attacks (8%), ShinyHunters 16 attacks (6%), and INC 11 attacks (4%).

The INC ransomware group claimed 66 victims in undisclosed activity in 2025.

INC was responsible for 111 undisclosed ransomware attacks in Q3 2025, representing 7% of all undisclosed ransomware attacks.

The INC ransomware group exfiltrated 5.7 TB of data from the Pennsylvania Office of Attorney General.